This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: i+hWqNQHAt3t8ruC1eRTn1bbqOdxMsFv7DDrC/SfXCg= Subject key identifier: C8:B2:47:74:A4:81:02:E4:01:58:2C:93:6A:C8:15:A6:6C:DD:21:8E Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 35952333298261235180C0D7E1451AE10DFFA81D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: BE Signing time: Tue 02 Dec 2025 12:10:55 +0000 Manifest this update: Tue 02 Dec 2025 12:05:55 +0000 Manifest next update: Fri 05 Dec 2025 22:03:55 +0000 Files and hashes: 1: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: YT6vjcNQH5l6kO9s7wD5TsmDAE+hUxsR2gegZF0N04Q=) 2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:95:23:33:29:82:61:23:51:80:c0:d7:e1:45:1a:e1:0d:ff:a8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Dec 2 12:05:55 2025 GMT Not After : Dec 5 22:03:55 2025 GMT Subject: CN=C8B24774A48102E401582C936AC815A66CDD218E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:5f:55:27:ad:09:8a:b4:95:43:1a:1c:67: b5:3c:4d:f7:0c:c7:03:e4:1e:3c:78:36:4b:7e:3a: 6c:03:cd:48:c1:85:31:6c:69:8a:79:a5:90:be:87: 58:17:65:c0:cf:b6:11:64:0f:70:9d:13:1b:f3:9d: b3:85:fb:77:3f:d8:0a:b2:1d:3a:20:91:18:dd:09: ee:13:03:c8:51:0e:df:cf:d5:1d:47:c3:77:76:2f: 7b:fb:7c:ff:2a:d6:c3:54:48:56:b6:b0:bf:ab:15: 1e:a0:43:2f:e5:ad:c0:e4:b4:17:fe:1e:b0:41:b1: 2f:0a:74:4d:c7:05:61:22:33:fd:3e:fc:c4:e0:8b: 6b:d8:68:75:9f:5b:da:e5:bb:76:b1:2a:ef:71:93: 2e:bb:27:19:0a:a1:e4:17:de:46:eb:46:c2:8a:67: ac:2c:0a:43:73:64:0b:a8:59:1b:f3:c2:2f:0f:b4: 02:fc:5a:ea:f9:6f:74:ca:57:0a:9b:dc:7f:7d:f6: 9f:f7:2a:6f:f7:ea:76:d1:d4:d0:a4:cb:1b:bc:c2: 02:40:4a:66:b1:1f:e5:ae:f2:1e:eb:21:e0:e1:bb: 22:1b:d9:0c:9d:7c:7d:d9:81:b7:3f:9c:cb:92:47: fe:f2:c6:75:af:fa:2b:cc:50:f5:5b:a5:f0:14:85: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B2:47:74:A4:81:02:E4:01:58:2C:93:6A:C8:15:A6:6C:DD:21:8E X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5a:41:61:dd:63:0d:a7:a9:22:94:30:ff:5a:25:83:c5:d3: 76:ae:e1:7c:13:70:6a:76:6d:18:e2:a3:80:0f:8a:4e:85:d3: 5f:01:a9:a0:11:f1:1f:1f:df:5c:20:05:88:02:3d:dd:cc:7e: 26:10:1c:83:35:e4:fb:b4:b1:a1:7f:01:e0:0e:c7:03:54:65: b5:cd:04:33:d3:6b:7b:87:f0:55:d4:bb:a6:c8:0b:f3:90:5a: 73:aa:ee:6d:31:8f:22:3a:2a:6a:d7:69:f7:99:c5:96:0b:0d: 64:79:c4:f6:f1:fc:6d:f9:95:0f:ca:2c:af:2e:fd:74:33:60: 16:08:51:0a:5c:e2:ca:71:ae:8d:19:77:98:69:e9:f3:fb:fc: 2a:e8:c8:dc:9f:84:f7:23:8c:4a:e7:eb:b1:87:b4:cb:5a:51: 2a:5d:74:a8:c9:ea:bd:1d:ad:8f:b5:98:30:fd:bc:9d:fb:0c: 4a:f7:56:32:14:98:e1:06:fa:7b:70:d8:8b:4f:71:c6:b8:f4: 6c:15:81:3d:2d:65:d7:da:20:fd:d2:0a:c2:41:e6:be:9f:9c: 4b:9d:73:e8:a5:50:34:35:b5:fa:83:42:68:d5:ec:fa:a6:fd: f1:83:c9:ea:5b:f9:ca:0a:7e:4a:73:10:54:3d:93:0b:af:fe: 12:0d:66:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZUjMymCYSNRgMDX4UUa4Q3/qB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTEyMDIxMjA1NTVaFw0yNTEyMDUyMjAzNTVaMDMxMTAvBgNV BAMTKEM4QjI0Nzc0QTQ4MTAyRTQwMTU4MkM5MzZBQzgxNUE2NkNERDIxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbV9VJ60JirSVQxocZ7U8TfcM xwPkHjx4Nkt+OmwDzUjBhTFsaYp5pZC+h1gXZcDPthFkD3CdExvznbOF+3c/2Aqy HTogkRjdCe4TA8hRDt/P1R1Hw3d2L3v7fP8q1sNUSFa2sL+rFR6gQy/lrcDktBf+ HrBBsS8KdE3HBWEiM/0+/MTgi2vYaHWfW9rlu3axKu9xky67JxkKoeQX3kbrRsKK Z6wsCkNzZAuoWRvzwi8PtAL8Wur5b3TKVwqb3H999p/3Km/36nbR1NCkyxu8wgJA SmaxH+Wu8h7rIeDhuyIb2QydfH3Zgbc/nMuSR/7yxnWv+ivMUPVbpfAUhYLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLJHdKSBAuQBWCyTasgVpmzdIY4wHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVaQWHdYw2nqSKUMP9aJYPF03au4XwTcGp2 bRjio4APik6F018BqaAR8R8f31wgBYgCPd3MfiYQHIM15Pu0saF/AeAOxwNUZbXN BDPTa3uH8FXUu6bIC/OQWnOq7m0xjyI6KmrXafeZxZYLDWR5xPbx/G35lQ/KLK8u /XQzYBYIUQpc4spxro0Zd5hp6fP7/CroyNyfhPcjjErn67GHtMtaUSpddKjJ6r0d rY+1mDD9vJ37DEr3VjIUmOEG+ntw2ItPcca49GwVgT0tZdfaIP3SCsJB5r6fnEud c+ilUDQ1tfqDQmjV7Pqm/fGDyepb+coKfkpzEFQ9kwuv/hINZp4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client